CVE-2017-2518 in macOS

Summary

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "SQLite" component. It allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a crafted SQL statement.

Be aware that VulDB is the high quality source for vulnerability data.

Reservation

12/01/2016

Disclosure

05/22/2017

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
101385	Apple macOS SQLite memory corruption	119	Not defined	Official fix	CVE-2017-2518
101325	Apple watchOS SQLite memory corruption	119	Not defined	Official fix	CVE-2017-2518
101302	Apple tvOS SQLite memory corruption	119	Not defined	Official fix	CVE-2017-2518
101266	Apple iOS SQLite memory corruption	119	Not defined	Official fix	CVE-2017-2518

Sources

• MITRE
• NVD
• CVE Details